Analysis
-
max time kernel
111s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2024, 01:21
Behavioral task
behavioral1
Sample
ae4c7384b65bfbf1ebf5340b4c150c17ac77e5d8823b76199a64d5dfa18e8f5eN.exe
Resource
win7-20241010-en
General
-
Target
ae4c7384b65bfbf1ebf5340b4c150c17ac77e5d8823b76199a64d5dfa18e8f5eN.exe
-
Size
83KB
-
MD5
a452431a5c794ce4c657c494b4dc5710
-
SHA1
ea13e7db5c5deb36675a629a6d740622b6ae51ac
-
SHA256
ae4c7384b65bfbf1ebf5340b4c150c17ac77e5d8823b76199a64d5dfa18e8f5e
-
SHA512
d62cb5600f4dd7beb097a9b759fdd1cce8459d7f1b6b913a3a287a9ba544e281d2cd412235f2352b06c42c699accd56c065287812936cc9613af51ef1fa81187
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+zK:LJ0TAz6Mte4A+aaZx8EnCGVuz
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3156-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3156-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3156-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3156-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000300000001f626-12.dat upx behavioral2/memory/3156-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3156-18-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3156-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ae4c7384b65bfbf1ebf5340b4c150c17ac77e5d8823b76199a64d5dfa18e8f5eN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5f5fe8d93f17cae91023f389563fea456
SHA12745cc8e32285745fcb5e341dc2a5f2c9385b1f9
SHA2560e21f3962c586120964188f398e18fa7a0493b5dfa348bdcb1598f4f137f9d5a
SHA51218f44531ffc4239679e7e27e419e547dc9dc1d261c2e831393f6d2ec1451942385d5e1ca2d87a06a83a6fda97f3e483cbd34c584ad35c532a8c9b6f0d50c31ae